summaryrefslogtreecommitdiff
path: root/modules/wg/proxy.nix
blob: a94f7e2f19e82a076f77d6ce9858867f768da633 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
{ config, ... }:
{
  oxalab.wg = [
    {
      networkName = "0xa-proxy";
      CIDRs = [
        "10.89.88.0/24"
        "fd31:185d:722f::/48"
      ];

      hosts = {
        "cloud" = {
          address = [
            "10.89.88.1/24"
            "fd31:185d:722f::1/48"
          ];
          publicKey = "XdUqSz0W6aqJET/9wNwoRyR8mgPs2dRWm+ijNwzEyE0=";
          privateKeyFile = config.sops.secrets."wg/0xa-proxy".path;
          endpoint = {
            enable = true;
            endpoint = "188.245.196.27";
            port = 51821;
            publicIface = "enp1s0";
          };
        };
        "auth" = {
          address = [
            "10.89.88.11/24"
            "fd31:185d:722f::11/48"
          ];
          publicKey = "5pW+lt3Xty8IdQ3ndcIXR3B7pl3hV+8M+EgvGmaRhyU=";
          privateKeyFile = config.sops.secrets."wg/0xa-proxy".path;
        };
        "radicale" = {
          address = [
            "10.89.88.12/24"
            "fd31:185d:722f::12/48"
          ];
          publicKey = "EIdTwWTqGJv9i2rV+Uu8d/QptGwFAFjHcHp/Hquhr3g=";
          privateKeyFile = config.sops.secrets."wg/0xa-proxy".path;
        };
        "immich" = {
          address = [
            "10.89.88.13/24"
            "fd31:185d:722f::13/48"
          ];
          publicKey = "NXBlfKx4udjI6C7Dcp1Us7lYnE+L0avnMb1VSLxj42s=";
          privateKeyFile = config.sops.secrets."wg/0xa-proxy".path;
        };
        "miniflux" = {
          address = [
            "10.89.88.14/24"
            "fd31:185d:722f::14/48"
          ];
          publicKey = "2Lvjzg8k5EIR0Y5mlsCHOs1cJl1+1SL0QMxkKUmliE0=";
          privateKeyFile = config.sops.secrets."wg/0xa-proxy".path;
        };
        "forgejo" = {
          address = [
            "10.89.88.15/24"
            "fd31:185d:722f::15/48"
          ];
          publicKey = "pXiOmI3aspl2IvdvLXLddxw76QYMRTACNm42nq+L4D0=";
          privateKeyFile = config.sops.secrets."wg/0xa-proxy".path;
        };
      };
    }
  ];

}